Advisories · Technology
Spring for Apache Kafka.
Every CVE that names Spring for Apache Kafka among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop
- Spring for Apache Kafka
- CWE-1284
- CVSS 6.5 Medium
In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages
- Spring for Apache Kafka
- Server-side request forgery (SSRF)